Lucene search

K
nvd[email protected]NVD:CVE-2023-47364
HistoryNov 09, 2023 - 2:15 p.m.

CVE-2023-47364

2023-11-0914:15:07
CWE-326
web.nvd.nist.gov
2
token leakage
nagaoka taxi
remote attackers
malicious notifications

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

33.5%

The leakage of channel access token in nagaoka taxi Line 13.6.1 allows remote attackers to send malicious notifications to victims

Affected configurations

Nvd
Node
linecorplineMatch13.6.1
VendorProductVersionCPE
linecorpline13.6.1cpe:2.3:a:linecorp:line:13.6.1:*:*:*:*:*:*:*

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

33.5%

Related for NVD:CVE-2023-47364